[tor-talk] Tor protocol classification

[Allen]

>
> 1. Can anyone give me a description of what Tor is doing during the
> following stages of bootstrapping:
>

https://gitweb.torproject.org/torspec.git/tree/


> The reason I picked these stages of bootstrapping is because they’re the
> places where Tor is recognized and blocked by DPI equipment from Cyberoam.


It might just be blocking specific destination IP addresses, or it might be
recognizing unique properties of the TLS handshake implementation between
the user's Tor client and network's Tor relays.

https://tools.ietf.org/html/rfc5246


On Mon, Aug 8, 2016 at 3:01 PM, Justin <davisjustin002 at gmail.com> wrote:

> Hi,
> I’ve been interested in Tor censorship for a few years now, and had some
> questions.
> 1. Can anyone give me a description of what Tor is doing during the
> following stages of bootstrapping:
> A. 10% Finishing handshake with directory server.  What happens during the
> handshake and what makes it fingerprintable by a DPI box?
> B. 20% Asking for network status consensus.  Same questions as A.
> C. 45% Asking for relay descriptors.
> D. 85% Finishing handshake with first hop.
> E. 90% Establishing a Tor circuit.
> The reason I picked these stages of bootstrapping is because they’re the
> places where Tor is recognized and blocked by DPI equipment from Cyberoam.
> Keep in mind this is Vanilla Tor, no PT are used.
> Thanks very much,
> Justin.
> --
> tor-talk mailing list - tor-talk at lists.torproject.org
> To unsubscribe or change other settings go to
> https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk
>